Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
File:                     186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa (raw, json)
Hash identifier:          gOMJ14qPgS/PjzV0z7+jWtks1jMwUs/sPoc/y50yaEY=
Subject key identifier:   3B:9C:7A:9C:85:3D:64:D3:E0:CF:7C:64:D2:46:76:C6:96:81:EE:F3
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584DBFD07B432E97828C4EC8E800
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     20253
IP address blocks:        2606:bc40:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:7b:43:2e:97:82:8c:4e:c8:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=48f0d865-1108-41de-97e2-7c73576d9ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:99:b5:9b:0b:37:e9:80:b5:16:19:92:40:
                    ce:fc:28:24:38:9e:e5:d8:40:26:ea:23:55:b6:00:
                    56:6e:90:80:4e:b9:5a:b8:9e:66:e6:73:16:91:b4:
                    8c:da:27:72:56:42:b6:2b:e3:8f:f0:99:72:f7:2a:
                    d0:5f:8d:34:c9:d6:a0:f7:e8:a7:86:cc:11:83:8c:
                    23:77:d0:31:89:87:88:36:be:2d:74:35:38:ed:b9:
                    4b:5f:12:96:f1:ee:f3:09:12:21:ea:1a:6a:52:0e:
                    d9:f3:21:a6:e1:ef:21:ca:a8:02:7d:36:ef:90:68:
                    0c:b1:c3:5f:a7:61:81:c0:3c:9e:de:ef:3e:fd:48:
                    01:8d:6e:b7:e6:05:23:61:0f:6d:21:dd:40:9d:07:
                    92:53:f3:d2:33:2c:d9:e5:5d:d1:fe:8f:6e:fc:92:
                    9f:88:95:c3:5d:eb:5b:ed:b6:2f:fc:53:b4:f6:15:
                    b3:fd:49:fa:b0:2b:14:83:4b:65:b1:94:d6:26:c1:
                    64:fa:d3:61:cc:5e:a6:ea:f0:84:1f:63:d7:04:54:
                    10:47:ec:79:b7:4e:7f:8f:a5:5f:33:4b:18:2b:88:
                    ee:a2:7a:46:9c:57:e9:df:38:0f:ed:98:52:78:5e:
                    cf:9c:86:48:62:66:b2:45:8a:09:78:93:1c:53:8f:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9C:7A:9C:85:3D:64:D3:E0:CF:7C:64:D2:46:76:C6:96:81:EE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:27:f9:4f:57:0a:ab:09:5b:94:90:9e:6c:b8:54:be:c5:2a:
         b6:34:d7:47:49:a5:f2:55:79:05:c4:af:42:9e:ff:5a:ef:d3:
         dd:c2:dc:f1:6f:5b:2e:36:b8:c0:ed:d6:ec:80:1f:c9:13:55:
         40:f0:39:55:52:42:86:42:4b:52:15:72:cc:22:e1:1e:05:bf:
         96:ae:48:81:d2:44:5b:23:ce:5a:d1:43:f1:d0:ee:73:50:45:
         c1:b1:05:a2:d0:67:73:dd:ac:f0:01:e1:df:4e:e1:3f:69:89:
         2e:cf:e7:bb:bd:32:02:ec:86:b0:ce:b8:60:96:16:87:d2:35:
         d5:e5:64:99:96:41:58:dd:66:ef:1f:56:97:5d:d7:95:2f:73:
         87:fa:53:c3:55:ed:34:60:00:c0:22:fe:50:b3:ca:cb:a0:34:
         4b:67:a8:f9:6d:92:91:dd:8a:00:16:10:e7:80:1e:a8:4c:9f:
         a9:df:00:3b:d9:18:8d:c4:cf:6c:f7:83:e1:45:09:32:f7:36:
         98:17:c9:e9:b8:10:d9:04:39:43:97:58:c3:7c:93:64:42:b2:
         79:ff:b5:78:96:3c:c3:c1:e8:a6:99:02:48:a2:83:b0:59:a7:
         25:7b:15:f8:17:04:a9:6f:c2:65:be:b5:c1:49:c4:79:78:13:
         85:1b:12:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:05 2026 by rpki-client